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In a previous paper certain measurable criteria have 
been derived, that are sufficient to demonstrate the existence 
of Einstein-Podolsky-Rosen (EPR) correlations for measure- 
ments with continuous variable outcomes. Here it is shown 
how such EPR criteria, which do not demand perfect EPR 
correlations, can be used to prové the extent of security for 
continuous variable quantum cryptographic schemes (in anal- 
ogy to that proposed by Ekert) where Alice and Bob hope 
to construct a secure sequence of vàlues from measurements 
performed on continuous-variable EPR-correlated fields sent 
from a distant source. It is proven that the demonstration of 
the EPR criterion on Alice's and Bob's joint statistics com- 
pels a necessary loss in the ability to infer the results shared 
by Alice and Bob, by measurements performed on any third 
channel potentially representing an eavesdropper (Eve). This 
result makes no assumption about the nature of the quantum 
source of the fields transmitted to Alice and Bob, except that 
the EPR correlations are observed at the final detector loca- 
tions. In this way a means is provided to establish security 
in the presence of some loss and less than optimal correla- 
tion, and against any eavesdropping strategy employed by 
Eve prior to detection of the fields by Alice and Bob. 

I. INTRODUCTION 

Einstein, Podolsky and Rosen jp (EPR) presented a 
now famous argument in 1935 in an attempt to show that 
quantum mechanics is an "incomplete" theory. Their 
argument was based on the premise of "no action-at- 
a-distance" and made assumptions about the nature of 
"reality" . In 1966 Bell j|] showed that the predictions 
of all theories (called local hidden variable theories) con- 
sistent with these EPR premises would satisfy certain 
constraints called Bell inequalities. He also showed that 
for some situations the predictions of quantum mechanics 
will violate these Bell inequalities, meaning an incompat- 
ibility of quantum mechanics with local hidden variables. 

While Bell's original work, and subsequent experi- 
ments relating to it, applied to situation of discrete spin 
measurements, the original EPR argument was presented 
for "position" and "momcntum" measurements with con- 
tinuous variable outcomes. The experimental observation 
of such continuous variable EPR correlations have been 
achieved (^-|| using fields, where the conjugate "posi- 
tion" and "momentum" observables are replaced by the 
two orthogonal noncommuting quadrature phase ampli- 
tudes of the field || . The theoretical proposal [0J|] relat- 
ing to these experiments employed a two-mode squeezed 



state U as the source of EPR fields. For such experi- 
ments it is not possible to demonstrate the perfect cor- 
relation as discussed originally by EPR. The experimen- 
tal signatures are based on a criterion first presented 
in 1989, and expanded on in a recent paper pf3j . The 
EPR fields generated through the two-mode squeezing 
interaction have enabled the experimental realization of 
a continuous variable quantum teleportation jnj. 

Quantum cryptography using squeezed or two-mode 
squeezed states predicting EPR correlations for quadra- 
ture phase amplitude measurements with continu- 
ous variable outcomes have been recently investi- 
gated [Ï^-[Ï9|]. Of particular interest here is the contin- 
uous variable quantum cryptographic scheme ]T^ , ^6| , pTt 
analogous to that discussed by Ekert |2(J for spin- 1/2 
systems where Alice and Bob wish to construct a secure 
key from correlated data sent to each of their locations 
from an entangled continuous variable EPR source. The 
original proposal of Ekert proposed to use the correlated 
spin state shown by Bohm |2ÏJ to demonstrate a ver- 
sion of the EPR paradox relating to measurements with 
discrete outcomes. Bell showed in 1966 that this state 
(the Bell-state) violates a Bell inequality, and in Ekert 's 
proposal the violation of the Bell inequality is used to 
demonstrate security. 

The direct continuous variable "position / momentum" 
measurements that demonstrate the EPR paradox for the 
two-mode squeezed state cannot by any simple rotation 
of measurement angle demonstrate a violation of a Bell 
inequality. The point of this paper is to emphasize that 
this does not howevcr diminish the usefulness of such 
a state in for example providing secure mechanisms for 
quantum cryptography protocols, since one can replace 
the Bell-inequality used in Ekert 's protocol by an EPR- 
criterion to test for security. 

In this paper we prové how the demonstration of EPR 
correlations, using the 1989 EPR criterion, by Alice and 
Bob on their two detected channels puts a limit on the 
accuracy of any inference made by Eve, about the results 
of the measurements performed by Alice and Bob. Im- 
portantly this is proved for any quantum source, mean- 
ing security against any strategies Eve is able to employ 
prior to Alice and Bob detecting the fields. 

To summarize the conclusions of this paper, it is shown 
that the determination by Alice and Bob of a perfect, 
maximum EPR correlation in their detected fields im- 
plies security against any hypothetical Eve obtaining the 
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key sequence. If Eve has intercepted one or both of the 
EPR channels (from the source to Bob or from the source 
to Alice) in any manner, to obtain the key sequence with 
any degree of accuracy (to give a noninfinite variance in 
her estimate of the vàlues), then it is proved that the EPR 
correlation detected by Alice and Bob could no longer be 
maximum. It has also been proved that there is no al- 
ternative set of quantum fields (source) available to Eve, 
that would enable her to obtain the key sequence with 
any degree of accuracy, and still retain the optimal EPR 
correlation measurable between Bob and Alice. 

The situation where a reduced EPR correlation is ob- 
served between Alice and Bob is more subtle. Alice and 
Bob would expect a certain degree of EPR correlation 
based on measurements performed on their EPR source 
(and perhaps an expected degree of loss on transmission) . 
If their measured EPR correlation is noticeably reduced 
on one particular transmission then this could indicate 
Eve's presence (through extra loss) on Bob's channel, and 
certainly it would be wise to retransmit. However even 
in such a situation where eavesdropping might have oc- 
curred, (or in the situation where the EPR correlation is 
apparently as expected but where it cannot be excluded 
that Eve has substituted a different quantum source), our 
procedure allows a deduction of the minimum degree of 
fuzziness of Eve's estimate of the key vàlues shared by 
Alice and Bob. 

The strategy here is to derive limits on Eve's knowledge 
of the key sequence, based only on the reliable measure- 
ment of a certain amount of EPR correlation between 
Alice and Bob. This result is of current relevance in that 
fixed amounts of EPR correlation for continuous variable 
outcomes have been (irrefutably) confirmed experimen- 
tally (whereas Bell inequality violations have not). The 
proposal is to then use these limits to encode the message 
in such a way as to elude Eve. 

II. EPR CRITERIA BASED ON CONDITIONAL 
MEASUREMENTS 

We hrst need to dehne the EPR criteria, and here the 
results of a previous paper are summarized. Con- 

sider two quantum fields propagating towards two spa- 
tially separated location at A and B respectively. The 
fields will be generated by a appropriate quantum source 
so that the results of certain measurements are corre- 
lated. Two observables x (the "position") and p ("mo- 
mentum") arc defincd for the subsystem at location A. 
These observables satisfy an uncertainty relation 

AxAp > C (1) 

but where we will consider from this point on that with 
appropriate scaling the x and p are now dimensionless 
and C = 1. A measurement x B made at B gives a result 



xf . In this paper, i is used to label the possible re- 
sults, discrete or otherwise, of the measurement x B . The 
results of measurements x and x B at A and B are corre- 
lated, so that the measurement at B enables a prediction 
to be made about the result of a measurement x at A. We 
define a set of distributions P{x\xf ) giving the probabil- 
ity of a result x for the measurement at A, conditional 
on a result xf for measurement at B. The variance and 
mean of the conditional distribution P(x\xf ) are denoted 
by Af x and fj,i respectively. 

Also, for certain correlated fields, we can infer the re- 
sult of measurement p at A, based on a measurement, p B 
say, at B. We denote the results of the measurement p B 
at B by p B . We also define the probability distribution, 
P(p\p B ) for obtaining the result p upon measurement of 
p at A, conditional on the result p B for the measurement 
p B at B. The variance of the conditional distribution 
P(p\pf) is denoted by A^p. 

The situation discussed by Einstein-Podolsky-Rosen 
demands a perfect correlation between the result of mea- 
surements i at A and x B , and also between p at A and 
p B at B. For this case, the variances of the conditional 
distributions must satisfy 

A { x = Ajp = (2) 

for all i,j. This situation however is not achievable for 
continuous variable measurements. 

It has been discussed in the previous paper |ïo| how 
EPR correlations would be demonstrated where one 
can establish that each of the conditional distributions 
P{x\xf) is very narrow, so that 

P(x\xf)=0 , where \x - m\ > 5 (3) 

and 5 < 1. A similar result must be proved for each 
P(p\p B ). As discussed previously Jïo| this situation rep- 
resents the spirit of the original EPR gedanken experi- 
ment in its truest form, but is difficult to achieve exper- 
imentally. 

A more readily achieved criterion still sufficient to 
demonstrate EPR correlations was proposed in 198 9 |7|| 
and has been further explained in the previous paper |jlO|| . 
We first define the weighted variance 

A* nf x = Yl P ( x ?) A i 2x ( 4 ) 

i 

and similarly 

Al f p = J2 P (PÏ)l· j 2 p (5) 

i 

Here P{xf) is the probability for a result xf upon mea- 
surement of x B , and P(pj) is defined similarly. It has 
been shown that the observation of 

fP < 1 (6) 
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implies a demonstration of EPR correlations (the EPR 
paradox) . 

It is mentioned that the evaluation of the conditional 
distributions for each outcome of the continuous vari- 
able xf at B is not always be practical. It has been 
discussed [|7|]Ï0|] previously how it is possible to per- 
forin other measurements, closely related to squeezing 
measurements, that are also sufficient to indicate the 
EPR/cntangled nature of the system. This is the ap- 
proach used experimentally to date to demonstratc EPR 
correlations. We propose upon a result xf for the mea- 
surement at B that the predicted or estimated value 
for the result x at A is given by the linear estimate 
x est = gxf + d. The deviation Si — x — (gxf + d) in 
this linear estimate can in principle then be measured, 
and an average over the different vàlues of xf evaluated. 
We obtain as a measure of average error in our inference 
of the result at A, based on the result at B, and using 
this linear approach: 

A| n/ii x = ^P(o:f)(«5 2 ) í 

xf 

= ({x-(gx B +d)} 2 ). (7) 

The best linear estimate x es t is the one that will minimize 
Aj n f L x. The best choice for g is discussed in [fjj. Where 

Xest — f^i 

it follows that the variance A 2 nfL x = A 2 nf x. 
Generally however A 2 n f L x > Aj n /. The observation of 

A mftL xA mfiL p < 1 (8) 

implies quantum inseparability, for any g and d, and also 
the situation of the EPR paradox. 

III. THE TWO-MODE SQUEEZED STATE AS 
THE QUANTUM EPR SOURCE 

Suppose the two quantum fields are generated via the 
interaction Hamiltonian Hj = ihnfòb' — àb), where à 
and b symbolize the boson operators for the fields at A 
and B respectively. For vacuum initial states this inter- 
action generates, after a finite time t, two-mode squeezed 
light @ 

OO 

\ip >= ^2 c„|n > a \n > b (9) 

where c„ = tanh n r / 'coshr and r = nt. This interaction 
provides a quantum model for the parametric amplifier. 

This simple quantum state was shown to be EPR- 
correlated in reference and EPR correlations using 
parametric interactions and the criteria (^|) have been 
achieved experimentally. We define the quadrature phase 
amplitudes 



x = X a = (à + fi' ) 
P = P a = (à - a*)/i 
x B = X b = (6 + 6+) 

p B =P b = (b-P)/i (10) 

that are measurable using local oscillator and homodyne 
detection techniques that were developed originally in ef- 
forts to generate and detect squeezed light. The Heisen- 
berg uncertainty relation is A 2 X a A 2 P a > 1. 

It is seen from the linear EPR criterion (|J) that the 
following is also a criterion sufhcent to demonstrate EPR 
correlations in the spirit of the original EPR paradox: 

A(X a - gX b )A(P a + hP b ) < 1 (11) 

where we have used the linear form 

A mf x = A 2 inf<L x = ((X a - gX b ) 2 ) (12) 

and A 2 inf p = A 2 mf L p = ((P a + hP b ) 2 ), and g and h are 
parameters chosen to minimise the variances (the choice 
of d is best at since the quadrature amplitude means 
for the vacuum squeezed state are zero). 

The two-mode squeezed state predicts M (g = h = 
tanh2r) the correlations X a — X b , and P a = —P b to give 

= &Lf,LP = V cosh2r, (13) 
a clear demonstration of EPR correlations for all r. 

IV. THE CRYPOTOGRAPHIC SCHEME 

We now consider the application of the EPR state 
to quantum cryptography with continuous variable out- 
comes. To summarize, an EPR source emits two fields, 
one which propagates towards Alice at location A, and 
the other to Bob at location B. As one possible strat- 
egy, Alice selects to measure randomly either quadrature 
phase amplitude X a — x, corresponding to angle 9 = 0, 
or quadrature phase amplitude P a = p, corresponding to 
angle choice 9 = 7r/2, say. Similarly Bob will measure 
randomly either quadrature phase amplitude X b = x B , 
corresponding to angle <f> = 0, or quadrature phase am- 
plitude P b — p B , corresponding to angle choice 4> = w/2. 
As discussed in ||{J , and shown previously in 0] , for the 
choices 9 = <f> = 0, as the two-mode squeeze parameter r 
becomes large, the results x of Alice's measurement and 
xf for Bob's measurement, will become identical. For 
the choices 9 = (fi = w/2 the results p for Alice and p B 
are also correlated (anticorrelated in fact): for large r we 
have p = — p B . 

In the style of the original quantum cryptographic pro- 
posals p0[ |, we consider here the proposal where Alice 
communicates to Bob after the measurements (through 
a públic channel) her choice of measurement angle 9 and 
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the result for the measurement, for a subensemble, ran- 
domly selected after the detections. Bob is able to check 
his measurements and compare his value for the result of 
measurements that should be correlated with Alice's. 

Alice and Bob can then use their shared subensemble 
to calculate the conditional probabilities P(x\xf) and 
P{p\pf) an( i the associated respective variances A?x, 
A|p of these distributions defined in Section 2. Here x is 
Alice's result for x, and xf is the result for Bob's mea- 
surement (which we have symbolized by x B ) correlated 
with i. Similarly p is Alice's result for p, and p B is the 
result for Bob's measurement (symbolized by p B ) anti- 
correlated with p. For our particular two-mode squeezed 
state (0) the prediction is 



AiX = Ajp =\j \J cosh2r 



(14) 



for all i,j. 

The maintenance of the EPR correlation (between Al- 
ice and Bob's fields) is determined through examination 
of the individual AiX or Ajp, and through a measured 
degree of violation of the 1989 EPR criteria (^|). The pro- 
posal is that this is used to check, or establish a degree 
of, security. 

For example if perfect EPR corrclations arc established 
between Bob and Alice, it will be proved that there could 
have been no intervention on the channels from the source 
to Alice and Bob, or reconstruction of an altcrnativc 
source, by an eavesdropper Eve. Where Alice and Bob 
are able to confirm narrow conditional distributions sat- 
isfying it is possible to establish the necessity of a 
certain degree of fuzziness in Eve's data. Once security 
is established, the measurement angle for the remaining 
subset is shared, and where the choice of angle is to pre- 
dict correlation between results, the sequence of commou 
shared vàlues can be used in some manner to form a key. 



It is the objective here to prové security against any 
strategy Eve could adopt prior to the detection of the 
transmitted fields by Alice and Bob. For example Eve 
might interfere with and retransmit one or both of the 
fields in some manner to forward to Alice and/ or Bob. 
Alternatively she might sabotage the EPR source to sub- 
stitute an alternative three-channcled correlated source, 
where the three transmitted beams propagate to Alice, 
Bob and also Eve at a third location. Eve could then po- 
tcntially perform a hnal measurement after públic com- 
munication of Alice's angle choice. Alternatively, where 
Alice and Bob use an EPR source with less than opti- 
mal correlations, as would be the realistic situation, Eve 
might replace the EPR source with one showing improved 
EPR correlations. This might enable her to tap some of 
the signal for the purpose of eavesdropping, while the de- 
crease in EPR correlations that could be a consequcncc 
of her tapping would go unnoticed by Alice and Bob who 
expect a more weakly correlated signal anyway. 

It is possible to consider cryptographic schemes where 
security is established on the basis of the assumption of a 
secure source, and also a secure channel from the source 
to Alice (see for example |ïj]]). In such schemes, the 
tapping of the channel from the source to Bob shows as 
a loss of EPR correlations which can be detected by Alice 
and Bob, alerting them to Eve's interference. 

However for systems of perfect EPR correlation (such 
as generated from the Bohm-Bell state used in the origi- 
nal scheme of Ekert) a stronger proof of security is possi- 
ble without these assumptions of secure source and sec- 
ond EPR channel. It then becomes relevant to deter- 
mine the extent of such security possible for the contin- 
uous variable two-mode squeezed EPR state (^), whose 
EPR correlations have been experimentally confirmed, 
but which for finitc squcezc paramcter r is always less 
than optimally correlated. 



V. PROOF OF SECURITY 

We now need to give the proof of security for such an 
EPR scheme. It is assumed as usual that the choice of an- 
gles 9 and <p (whether to measure x or p) for Bob's and 
Alice's measurements are randomly and independently 
chosen after the transmission of the fields to Alice and 
Bob at secure spatially separated locations. Alice and 
Bob make delayed-choice measurements. Therefore we 
assume that an eavesdropper (Eve) cannot anticipate the 
angle choice prior to Alice and Bob receiving the fields. 
This must also be true of the selection of the subensem- 
ble used by Alice and Bob to evaluate the statistics to 
test security. In this way it is assumed that the statistics 
evaluated by Bob and Alice on the subensemble accu- 
rately reflect the statistics of the entire fields received by 
Alice and Bob. 
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FIG. 1. EPR-correlated fields reach Alice and Bob who 
perform delayed-choice measurements ("position" or "mo- 
mentum" ) as determined by the choice of 9 or (j>) at spatially 
separated locations. The correlated results can then form the 
shared vàlues for a key. If Alice and Bob can prové that their 
fields are EPR-correlated according to the 1989 criterion (|^), 
then it is impossible for any eavesdropper Eve at a third lo- 
cation to have an accurate replica of the correlated results 
shared by Alice and Bob. Eve's estimate of Alice's vàlues are 
necessarily less accurate than Bob's, and the degree of inaccu- 
racy can be evaluated from the details of the EPR-correlation. 
This is true regardless of the nature of the original quantum 
source. 

The proof of security presented here then gives a 
method to determine the level of security based only on 
the nature of the measured statistics evaluated between 
Alice and Bob after the detection of their fields, and 
therefore involves no assumptions regarding the amount 
of loss occurring during propagation or the nature of the 
original quantum state. We present a proof of security by 
demonstrating the impossibility of Eve, an eavesdropper 
at a third spatial location, having (or being able to ob- 
tain) a perfect copy of the results x, p shared by Alice and 
Bob, if Alice and Bob measure through their subensem- 
ble an EPR correlation based on their measurements Aix 
and Ajp (see Figure 1). 

An eavesdropping process by Eve results in the gener- 
ation of a final quantum state describable by a density 
operator symbolized by p. For example if Eve attempts to 
cxtract information by intercepting Bob's channel, quan- 
tum mechanically Eve's measurement process is repre- 
sented by a Hamiltonian that acts for some duration, 
there being an initial quantum state describing Bob's 
and Eve's (and Alice's) fields. The final state p that 
is produced after the interaction (we may also consider a 
series of interactions that may involve destructive mea- 
surements and state generation) describes Alice, Bob and 
Eve's final fields that are eventually detected and undergo 
measurements by Alice, Bob and Eve at their different fi- 
nal spatial locations. 

Eve attempts to gain the results of Alice's x (or p) 
through some measurement on her field symbolized by 
x E (and p E ). The quantum state p predicts probability 
distributions for the outcomes of all possible measure- 
ments performed by Alice, Bob and Eve: for example 
a probability distribution P x . x . p (x, xf ,p E ) for the out- 
comes x,xf,p E of Alice's, Bob's and Eve's results of 
measurement x,x B ,p E ; and also a P p , X}P (p,xf ,p E ) for 
the outcomes p, xf ,p E of Alice's, Bob's and Eve's results 
of measurement p, x B ,p E . 

We define the probability P(x\{xf ,p E }) of a result x 
for Alice's measurement of x, conditional on the results 
xf and p E for Bob's x B and Eve's p E respectively. We 
also define the probability P(p\{xf ,p E }) of a result p for 
Alice's measurement of p, given the results xf and p E 



for Bob's x B and Eve's p respectively. 

A constraint is placed on the variances A\ q x and 
Af q p of the conditional distribution P(x\{xf ,p E }) and 
P(p\{xf ,p E }) respectively, for any possible quantum 
state p. The predicted statistics of Alice's measure- 
ments conditional on measurements performed by Bob 
and Eve are described by the reduced density operator 
Pa = (xf \{p E \p\p E )\xf )/N (where N is a normalization 
factor). The variance A\ q x of the conditional distribu- 
tion P(x\{xf ,p E }) gives the uncertainty in the estimate 
of Alice's x conditional on the results xf &ndp E for Bob's 
x B and Eve's p E measurements. Bob's (and Eve's) mea- 
surement constitutes a measurement of Alice's i, with 
precision A^x. The uncertainty relation will imply the 
constraint (for the quadratures as defmedby ©, C = 1) 

A hqP > 1/A i>q x (15) 

The marginal distribution P(x\xf), the probability of 
Alice's result x for measurement x conditional on the 
result xf for Bob's measurement x B , is given by 

P(x\xf) = J2Px,xAx,x^PÏ)/P(x?) 

= j2 p ( x \i x i^})f P f ( 16 ) 

where f p E is the fraction f p E = P(xf ,p E )/P(xf); 
P(xf ,p E ) is the probability for result xf andp E , respec- 
tively, upon joint measurement x B and p E ; and P(xf) is 
the probability of xf for Bob's measurement of x B . This 
implies the following relationship for the variance Afx of 
the conditional distribution P(x\xf ). 

A*x>J2fv? A l g x ( 17 ) 

Pg 

The accuracy of the information obtainable by Eve is 
determined by the Standard deviation A E p of P E (p\p E ), 
the conditional distribution for result p for Alice's mea- 
surement of p given a result p E for Eve's p . This 
marginal distribution is given by 

p E (p\p E q ) = Y J p (v\{x?,P E :})f x ? (i») 

xf 

where the fraction f x B is defined as f x B = 
P(xf,p E )/P(p E ); P(p E ) is the probability for Eve's re- 
sult p E upon measurement of p E . The A E p is related to 
an average of these variances as given by 

(A E r>j2f X f^t q p as) 

X B 
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A. The case of perfect correlation 

First we present a proof of security for the case where 
Alice and Bob measure perfect EPR correlations, mean- 
ing that all AiX = Ajp = 0. This is the case if the 
quantum source is a simultaneous eigenstate of X a — Xb 
and P a + Pb, which is closest to the situation originally 
defined by EPR. The variance Afx is zero in this case 
we consider initially of perfect EPR correlations. It must 
follow therefore from (|Ï7j ) that each A^ q x is also zero. 
Using the constraint ( |15[) each Ai tq p must then be infi- 
nite. Therefore each A^p must also be infinite. Each 
conditional variance, for all possible outcomes p q , is in- 
finite, meaning that any measurement performed by Eve 
will give an infinite uncertainty in the prediction of Al- 
ice 's p. 

The same lògic applied to joint measurements of Bob's 
p B and Eve's x E implies an infinite variance for Eve's 
estimate of Alice's x. In this way it is deduced that Eve's 
estimates of each of Alice and Bob's sequential x, p vàlues 
(these constitute the final key) will have an associated 
infinite uncertainty. 

To summarize, the determination by Alice and Bob of 
an optimal EPR correlation 

A iX = 0, Ajp = (20) 

for all in their detected fields implies security that 
there can be no hypothetical Eve, at a third location as 
indicated in Figure 1, able to obtain the key sequence. 
This is proof that if Eve has intercepted one or both the 
EPR channels to obtain the key sequence with any degree 
of accuracy (so that there is a noninfinite variance in her 
estimate of the Alice and Bob's key vàlues), the EPR 
correlation would necessarily have been reduced to give a 
nonzero result for at least one of the A^x, Ajp. It has also 
been proved that there is no alternative set of quantum 
fields (source) available to Eve, that would allow her to 
obtain the key sequence with any degree of accuracy and 
still retain the optimal EPR correlation between Bob and 
Alice. 

B. The case of reduced correlation but where all 
conditional distributions are narrow 

Considering that a practical experiment will not have 
perfect correlation (vàlues of Aix might typically be 0.7 
for current situations ||), we need to argue more gener- 
ally. It is still possible to derive limits on Eve's knowledge 
of the key sequence, based only on the reliable measure- 
ment of a certain amount of EPR correlation between Al- 
ice and Bob (and the assumption that Eve does not have 
access to the random choice of Alice and Bob's measure- 
ment angles and subensemble selection, both of which 
are selected after transmission and detection of the fields 



by Alice and Bob). The proposal, such as that discussed 
in Section 6, is to use these limits to encode the message 
in such a way as to defeat Eve. 

Based on Alice and Bob's measurements over the 
subensemble, the conditional probability distribution 
P{x\xf ) (and P(p\p B )) can be measured by Alice and 
Bob, and their associated variances Afx (and A 2 p) can 
be evaluated. We examine in this subsection the case 
where all conditional distributions measured by Alice and 
Bob are shown to have a nonzero but small Standard de- 
viation, so that for example where these distributions 
are Gaussian Alice and Bob demonstrate AiX < 1/3 and 
Ajp < 1/3. 

Most generally the variances such as Afx are related 
to the individual variances Af q x by the relation (|Ï7j). Al- 
though the A^a; might be small, an individual Ai. ? might 
not be. The possibility cannot be ruled out that Eve is 
able to obtain upon some (small) fraction of her mea- 
surements the result of Alice's p to good accuracy. The 
relationship given by (|Ï6| ) is certainly true however. Sup- 
pose all (that is for all i) the conditional distributions 
P(x\xf ) measured by Alice and Bob are sufficiently nar- 
row so that the probability of obtaining a result x outside 
a range [ii — 5 < x < fM + 5 is zero ie 

P(x\x B )=0 , for \x-[ii\>5 (21) 

and we assume 6 < 1 (C = 1). A similar result must be 
proved for each P(p\p B ). Recali here /íí is the mean of 
the particular distribution P(x\x B ). In this case based on 
dÏ6| ) , we can say for sure that, for a given fixed xf , each of 
the P(x\{xf ,p E }) must also satisfy P{x\{xf ,p E }) = 
outside the range fii ± 5. This implies that each variance 
Af q x (of P(x\{xf ,Pg})) could not exceed the value of 
S 2 , implying in turn by (^5|) that each A itQ p must satisfy 

A^p > 1/5. (22) 

In this way, since this is true for all z, and using jïs|), 
it is proved that the uncertainty (standard deviation) 
in each of Eve's estimates of Alice's p (this uncertainty 
is the standard deviation of the conditional distribution 
P(p\Pg) as defined above) will exceed 1/5. 

Afp > 1/5. (23) 

For the two-mode EPR state (^), the conditional distri- 
butions are predicted to be Gaussian with variance given 
as AiX — Ajp = 1/^ cosh2r. Of course the actual dis- 
tributions must be measured by Alice and Bob as part 
of the security procedure. For r sufficiently large so that 
(recali 5 < 1) 

A lX <5/3 <l/3 (24) 

the Gaussian distribution is predicted to be negligible at 
x > 5, and there is then proof that Eve's best possible 
estimates satisfy 



G 



Afp > 1/6. 



(25) 



((Vm - rjm.Bob) 2 ) 



(26) 



This means that as Eve performs the measurement p E to 
obtain a rcsult p E , the Standard deviation of the condi- 
tional distribution P E {p\p E ) (for Alice's result p condi- 
tional on Eve's outcome) exceeds 1/5 for every possible 
outcome p E , and for all possible measurements p E . Sim- 
ilar lògic applied to Alice and Bob's conditional distribu- 
tions P{p\p B ) gives a corresponding limit on the error in 
each of Eve's estimates of Alice's result for x. 

In this way it is derived that a minimum degree of un- 
certainty or fuzziness (as given by A E p > 1/5, A E p > 
1/5) exists for Eve's estimate of every piece of the key 
sequence shared by Alice and Bob. If rjEve is Eve's esti- 
mate of the particular key value, and r\ is Alice's actual 
key value, then we have {{rjEve — rj) 2 ) 1 ^ 2 > 1/5. 



VI. A POSSIBLE ENCRYPTION PROTOCOL 

Using the prediction for the two-mode squeezed state 
AinfX = Ai n fp = Ajp = Aíx = l/^/cosh2r — * as 
r — ► oo , we see that as the squeeze parameter r = nt is 
increased it becomes possible for Bob to resolve Alice's 
x or p value while Eve can only resolve with error — > oo . 
The measured quadrature phase amplitude vàlues shared 
between Alice and Bob form a secure key sequence de- 
noted by the sequence r\ m , m — 1, 2, . . .. We will define 
the key r\ m to consist of Alice's relevant measured vàlues 
x (or p) , though in the limit of r — * oo there is no devia- 
tion of Bob's measured vàlues xf (or p B ) from Alice's. 

The data given by the variable z m is encoded, supposc 
simplistically to give a transmitted classical amplitude 
or number y m ,sent = z rn + Arj m (where A is a relative 
amplification factor). The key r] m known to both Alice 
and Bob cnables Bob to decode the signal z m , whereas 
Eve will have an infinite uncertainty in her measurement 
of r] m , and therefore z m . 

The chief difficulty for Alice and Bob comes for finite 
r where the EPR correlation is reduced. Suppose ini- 
tially that Alice and Bob's measurements of the EPR 
correlation and associated conditional distributions, en- 
able them to establish that the probability distribution 
P{x\xf) of Alice's result x conditional on Bob's result xf 
is a distribution with mean \ii and Standard deviation o~. 
The two-mode squeezed state (^) prediets a Gaussian dis- 
tribution = tanhrx^ for 9 = and a = l/y/ cosh2r. 
We suppose a similar result is achieved for P{p\p B ): 
(^) prediets the Gaussian with /i 3 = — tanh rp B and 
a = 1/yJ cosh2/íí. 

Bob's key sequence is the sequence r] m ,Bob that he 
builds up by selecting, for each of his relevant measure- 
ments, r\ m ,Bob — Hi where he obtained an outcome xf 
upon measurement of x B , or r\ m ,Bob — Hj where he ob- 



(The choice rj m ,Bob — /^i, Hj made by Bob minimizes this 
rms error.) Bob's estimate of the decoded data z m is 
z m ,Bob = y m ,sent - Arj m ^ Bo b- His rms error is 



{{z m — z„ l: Bob) 2 ) = A 2 {{r/ m — rj„^Bob) 2 ) 

(27) 



= A 2 - 2 



A satisfactory binning by Alice of her data z m enable Al- 
ice and Bob to share precisely such a signal sent by Al- 
ice. This is determined by Alice and Bob, based on their 
knowledge of the conditional statistics measured over the 
subensemble. For example let us assume that Alice and 
Bob's distributions are Gaussian. In this case there is a 
negligible chance (.0027) of \r\ m — r) m ,Bob\ being greater 
than 3ct, so that if Alice restriets the z m to be one of a 
series of numbers separated by 6Ao~, then Bob will round 
off correctly to reconstruct the correct signal. 

However Eve's decoded data is z m ^E = y m ,sent — 
Ar\ m ,Eve where rj m ^Eve is Eve's key. Consider the situ- 
ation discussed above in equation (|24| ) where every one 
of Bob's measured conditionals are Gaussian and satisfy 
Aíx = Ajp = a = 5/3 {5 < 1). With (|||) we conclude 
that each Standard deviation of Eve's conditional distri- 
butions P E {x\xf ) and P E {p\p E ) satisfies A E p > 1/5, 
Afx > 1/5. The rms error of Eve's signal must satisfy 
(a = 5/3) 



{{ z m ~ z m,Eve) 2 ) — A 2 {{rj m — rj m Eve) 2 ) 

> A 2 /5 2 = A 2 /9a 2 



(28) 



Suppose Bob and Alice's correlation reveals a = 1/3 
(which is the largest value that is sensible to this par- 
ticular approach). Then Eve's best could not do better 
than {{z m - z m ,Eve) 2 ) 1/2 = A. 

On the basis of the assumption of a particular form 
for Eve's conditional distributions P{x\x E ) and P{p\p E ) 
(eg Gaussian), a minimum error rate for Eve's informa- 
tion could be calculated. The probability of Eve eval- 
uating Alice's z m outside of the range z m ± 3Ao~, and 
to therefore establish the incorrect value for z, is signifi- 
cant if Eve's conditional distributions are Gaussian (the 
probability of an incorrect z m .Eve being 0.3173). The 
Gaussian calculation for Eve's error rate is relevant, in 
that the EPR channels generated from the source (||), 
and subsequently interfered with by Eve through mecha- 
nisms able to be modeled by linear interaction Hamilto- 
nians/couplings such as {a£ve and b symbolize the boson 
operators for Eve's and Bob's fields respectively) 



l·Li = n{à Eve tf + à E veb) 



(29) 



tained p B upon measurement of p B . The deviation of 
Bob's key value from Alice's key value is then 



with vacuum or squeezed state inputs, would predict such 
Gaussian conditional distributions. Examples of such lin- 
ear eavesdropping strategies, have been discussed previ- 
ously [H-[Ï5). 
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It is noted however that while a limit is placed on the 
variances of Eve's conditionals, the form of these distri- 
butions has not been constrained by the very general ap- 
proach presented here. For example Eve's eavesdropping 
might produce an r\ m ,Eve that has a significant probabil- 
ity peak located at or near zero, meaning that a signifi- 
cant number of the z m will be read with no error. Alice 
and Bob would need to use the fact that then necessarily 
other measurements performed by Eve must have very 
significant deviation from the true z m value as part of 
the encoding scheme. A more sophisticated scheme is re- 
quired, as for example one based on a scrambling of data 
where every value of the z m is needed to descramble com- 
pletely, and where significant single errors in a z m or r\ m 
value compound Eve's reduced ability to decode. 

VII. PROOF OF SECURITY FOR WEAKER 
CORRELATION 

The above protocol requires narrow conditional dis- 
tributions, AjX, Ajp < 1/3 (ie a < 1/3 for Gaus- 
sian distributions). With reported measured vàlues of 
A 2 n fX = ^ i P{x i )A 2 x ~ 0-7 such a value is proba- 
bly not currently achievable. Here we present a more 
general strategy which can apply where variances satisfy 
Aíx < .57, Ajp < .57. 

We define the set of probabilities {P(x E ), P(p q )} and 
uncertainties {A E x, A q p} which determine the accuracy 
of Eve's information on the key sequence (this being Al- 
ice's sequence of relevant x,p results). Here P(x E ) is the 
probabihty of Eve obtaining a result x E upon a measure- 
ment x E , and A E x is the Standard deviation of the prob- 
abihty distribution P E (x\x E ) for Alice's result x for x, 
conditional on Eve's result x E for x E . This set must be 
compared with the set of probabilities {P(xf), P(pf)} 
and uncertainties {A^a;, Ajp} that determine Bob's ac- 
curacy of information of Alice's x,p data. 

First, where the correlation between Alice's and Bob's 
data is sufficient to satisfy the 1989 criteria (||) for EPR, 
it can be shown that the sets of statistics are necessarily 
different: that determining Eve's information involving 
greater uncertainties than that determining Bob's infor- 
mation. We show this as follows. 

If we assume that Eve's set is identical to Bob's, we 
obtain a contradiction. We could define the joint prob- 
abihty Pi :q = P{xf ,pf) of the result xf for Bob's mea- 
surement x B and of the result p E for Eve's measure- 
ment p E As before we define the variances Af q x and 
Af q p of the probabihty distributions for Alice's result of 
measurement x and p respectively, conditional on Bob's 
and Eve's results xf p E . The prediction for the aver- 
age conditional variance (as measured by Alice and Bob) 
is given by A 2 inf x — £^ P(xf )Aj 2 a;. Also if Eve's in- 
ferred statistics are to be the same as Bob's, the quantity 



^fnf 2 P = Yï,q P(Pq)(^qP) 2 measured on Eve's statis- 
tics must equal Alice and Bob's measure of the average 
A\ n fp. Applying (|Ï7]) and (^9|) and the Cauchy-Schwarz 
inequality we would always predict 

A 2 inf xA 2 inf p = Aj nf xAf nf 2 p 

= (£p(*f)A^)(]>>(^)(Afp) 2 ) 

i q 

> £>(*f)/ pf Al q x)Ç£p(p E )f x? A 2 tq p) 

i,q i,q 

= (^2^iq x )(J2 p ^ A L·p) 

i,q i,q 
= (A h q 2 x){A hq 2 P ) 

>\(A hq xA E qP )\ 2 >l (30) 

This is not the case given that Bob's and Alice's statis- 
tics show the 1989 EPR criterion. In other words, the 
demonstration of the EPR criteria for Bob's and Alice's 
statistics ensures that there is a loss of information, as 
compared to Bob, on Eve's channel. 

An increase in Eve's error of inference on the data 
shared by Alice and Bob follows necessarily from Alice 
and Bob's measurements of the general EPR correlations 
using the 1989 criterion. It is required however to employ 
this fact in a satisfactory way to enablc Bob full informa- 
tion on a signal transmitted by Alice, while leaving Eve 
unable to decode. Above we have considered strategies 
where all conditionals have narrow variances (AiX < .3, 
Ajp < .3 for all in the fashion of a strong EPR 
paradox. 

Now we consider particular strategies for the situation 
of inference variances Ai n fX > .3. First it is possible to 
prové that 

Af nf p > 1/A mf x (31) 
From result ( p"9"| ) we have 

(A E nf ?p = J2r(p^q) 2 p 

q 

>J2P( X ?,Pq)l·lq P (32) 

i,q 

A 2 mf x = Y / P( x ?)& 2 x 

1 

>J2P(. X ^Pq)&l q X (33) 

i,q 

Using the Cauchy-Schwarz inequality and (^5|) we obtain 
©• 

Let us suppose then that Alice and Bob establish a 
uniform set of Gaussian conditional distributions with 
variances 

Aíx = Ajp = Ai n fx = a < 1. (34) 
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Alice can choose to bin her signal vàlues to the nearest 
number of a sequence separated by 6Aa, as described in 
Section 6. For the case where the two-mode squeezed 
state is used as a source the conditional distributions are 
Gaussian (this must be verified by Alice and Bob upon 
measurements). The probability of Bob decoding the 
wrong signal value (this is the probability that his value 
for the key deviates from Alice's by more than three Stan- 
dard deviations) is therefore negligible (.0027), meaning 
that Bob can use his slightly fuzzy key to decode correct 
signal vàlues. 

The average deviation of Eve's estimate (the mean of 
her conditional distribution) from Alice's measured key 
value x (or p) is given by the average variances of her 
conditional distributions. These must satisfy 

Af nf x > í/a. (35) 

The probability of an error (that Eve will decode Alice's 
signal z m incorrectly) is the probability that Eve's condi- 
tional distributions (P E (x/x E ), P E (p/p E )) deviate from 
the mean by an amount greater than 3a. 

First, provided 1/a > 3a (a < .57), it is necessary 
that Eve, in order to achieve an average variance Af n jp 
or Af n fX satisfying (|3|), will have key vàlues deviating 
from Alice's key value by an amount greater than 3a: 
\Vm - Vm,Eve\ > 3cr for some value of r) m ,Eve- This is 
true for any hypothetical eavesdropping scheme Eve might 
have employed. In othcr words it is proven that Eve will 
decode at some point to obtain wrong signal value z m 
sent by Alice. Of course the signal vàlues z m that are now 
shared accurately by Alice and Bob, but not by Eve, need 
not form the final message, but can be used as a discrete 
key to encode a further signal. 

A calculation of the Eve's error rate based on the as- 
sumption that her conditionals are Gaussian distribu- 
tions with equal is however immediately possible, 
for any S < 1. For example, where a = AiX = Ajp — 
= Ai n fp = .57, the probability of Eve's error is 

.32. 

Of course as discussed in Section 6, for absolutely se- 
cure cryptography, the exact nature of Eve's conditional 
distributions cannot be measured by Alice and Bob and 
therefore cannot be assumed. Since in (Bq) we only re- 
strict the average inference error, we have not ruled out 
that Eve is able to achieve very narrow conditional dis- 
tributions for most q, to obtain the correct result for 
Alice's signal for most of the signal sequence. This situ- 
ation however could only be achieved if Eve has a very 
significant A q x, for some q, and therefore a high devia- 
tion between Alice's and Eve's measured key vàlues for 
some of the key sequence, which would cause a large de- 
viation z m ^Eve — z m of Eve's decoded signal from Alice's, 
for some m. As discussed in Section 6, the encoding pro- 
tocol would then need to make use of, not only an Eve's 



error rate, but of possibly large individual errors, to re- 
duce her ability to decipher any final message. 

VIII. CONCLUSION 

It is proved in this paper that fields demonstrated by 
Alice and Bob (at two spatially separated locations) to 
have certain EPR correlations, enable Alice and Bob to 
share the results of measurements to a great accuracy. 
This accurate knowledge of a sequence of results of cer- 
tain measurements cannot be shared by a third experi- 
menter or eavesdropper Eve at a different location. In 
the case of EPR correlations that are less than ideal, cer- 
tain limits on Eve's accuracy of inference of the sequence 
of vàlues that form the key have been derived. This con- 
clusion makes no assumptions about loss or the nature 
of the quantum source, except that EPR correlations are 
measured by Alice and Bob, and therefore provides a se- 
curity against all strategies Eve may take to eavesdrop 
prior to Alice and Bob receiving the fields. 

For situations where EPR correlations between Bob 
and Alice are not perfect, it is still possible for Alice 
and Bob to reconstruct a shared key or signal sequence 
where the vàlues are shared with perfect accuracy. The 
fuzziness placed on Eve's key vàlues means that Eve will 
necessarily at some point decipher incorrectly, and some 
specific strategies are presented for the case where the av- 
erages of the variances of Bob's conditional distributions 
(determining Alice's result based on his measurements) 
satisfy Ai n fX < .57 and Ai n fp < .57. Specific error rates 
for Eve's key or decoded signal can be established where 
a particular form (for example a Gaussian as would be 
the case for various linear eavesdropping strategies) for 
her conditional distributions are assumed. Generally, the 
given encoding scheme must use Eve's proven nonzero 
error rate for a key sequence to establish that it is not 
practical for Eve to decipher a final message. 

Lastly a comment must be made on what could be con- 
cluded on the basis of measurements that would appear 
to be currently achievable (Ai n fX < .57 probably is not). 
Reported measurements are close to Ai n fX — Ai n fp — 
.7. The inference variances are measured experimentally 
in this case through the linear estimate described by Jï^ ) . 
Our results ( |3l"|) then prové that Eve's conditionals sat- 
isfy Af n jX > 1.4, Af n fP > 1.4. Assuming that the con- 
ditionals could be measured to be Gaussian and uniform 
with a Standard deviation a = AiX = Ajp = .7, we could 
apply the strategy discussed in Section 6 to allow Bob to 
share Alice's discretized data without significant error. 
The probability of Bob making an error is the probabil- 
ity that the conditional distribution gives greater than 
3a = 2.1 (a negligible error rate of .0027). 

If we assume Eve's conditional distributions are also 
Gaussian, then her Standard deviation is at least 1.4 
and her error rate is at least 0.136, fifty times greater 
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than Bob's. This gives a proven measure of a level of se- 
curity against all eavesdropping strategies employed by 
Eve triat would result in her conditionals being Gaus- 
sian. Such strategies include the use of any two-mode 
squeezed state-EPR source of the type (||) generated by 
the parametric amplification discussed in Section 3, in 
conjunction with any lossy mcchanisms or eavesdropping 
strategies involving linear beamsplitters such as given by 
the coupling (^9|). We cannot prové this generally how- 
ever for any strategy taken by Eve, since she may have a 
conditional distribution with Standard deviation 1.4 but 
where none of her results deviate from the mean by more 
than 2.1 (to give the same error rate on Alice's discretized 
data as Bob's). It is noted in conclusion however that it 
has been proved generally (see equation (^o|)) that Eve's 
estimates of the continuous vàlues that form Alice's orig- 
inal key sequence are more fuzzy than Bob's. 
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